PT-2026-27723 · Linux+1 · Linux Kernel+1

Published 2026-01-01 · Updated 2026-03-27 · CVE-2026-23358

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the error handling of the slot reset functionality within the DRM/amdgpu subsystem. If a device fails to recover after a slot reset is initiated, the system may attempt to access an uninitialized list due to an uninitialized hive pointer. This can lead to unpredictable behavior. The issue is addressed by properly initializing the list and hive pointer during error handling, ensuring the reset domain lock is released during the error detected callback.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

CVE-2026-23358

Affected Products

Linux Kernel

Amdgpu

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23358.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2026-23358 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23358 · Vendor Advisory
• https://git.kernel.org/stable/c/73e8bdf14248136459753252a438177df7ed8c7c · Patch
• https://ubuntu.com/security/CVE-2026-23358 · Vendor Advisory
• https://git.kernel.org/stable/c/baf4e7968911635eb816870af0ea587ac1457052 · Patch
• https://cve.org/CVERecord?id=CVE-2026-23358 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23358 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23358 · Vendor Advisory
• https://git.kernel.org/stable/c/b57c4ec98c17789136a4db948aec6daadceb5024 · Patch
• https://osv.dev/vulnerability/CVE-2026-23358 · Vendor Advisory
• https://git.kernel.org/linus/b57c4ec98c17789136a4db948aec6daadceb5024 · Note
• https://twitter.com/CVEnew/status/2036763488710791208 · Twitter Post
• https://twitter.com/CVEarity/status/2037568337518203259 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note